Account creation and login pages are also served over HTTP. This site is insecure and should be taken down immediately.
Also, I appreciate and agree with the mindset that SSL should be ubiquitous and that this site is insecure, but I gotta say, the way you're phrasing this reminds me of the most arrogant, spoiled customers that "demand" whatever pleases them to customer support and take out all their anger on CSRs.
You can share advice without being demanding and arrogant. Try it.
I wasn't kidding when I said it reminded me of the attitude some of the nastiest people adopt when dealing with CSRs. Completely forgetting the human element and just demanding things all the time. A HN comment has even less of a say in whether a site be taken down.
Humility isn't a sin. How hard can it be to stop at "This site is insecure."?
If it's potentially exposing the personal information of others, yes. The fact that the above statement values the hypothetical feelings of a person providing the aforementioned site rather than the personal information potentially exposed by anyone using the site suggests that perhaps priorities have not been evaluated properly.
My statement was simple, short, and to the point. No criticism of its author was made nor intended.
There is no excuse these days for not protecting your users' data. It should be taken down and secured ASAP.
It is not demanding or arrogant to require and/or expect secure connections when an organization is requesting personal data.